2.2 The Websites use cookies. Cookies are IT data, in particular text files, stored on the Website User’s end device and used to manage the Websites and collect information related to the use of the Websites.
2.3 The Website uses the following types of cookie files depending on their purpose:
2.3.1 Essential cookies – used to ensure the proper operation of the Websites, to enable navigation in the Websites and the use of their basic functions. They are necessary to operate the Websites and they cannot be disabled as this would make it impossible to operate the Websites;
2.3.2 Functional cookies – used to save the settings selected by the User and any choices made in the Websites;
2.3.3 Analytical cookies – used to improve the performance of the Websites and to collect information on how Users make use of the Websites, to improve the Websites, to adapt the operation of the Websites to the User’s preferences and to create statistics on the use of the Websites;
2.3.4 Advertising cookies – used for marketing purposes such as personalisation of advertisements and content based on the User’s interests, to measure advertising performance and content, and to gain insight into the recipients of advertising and content. Information collected in this way may be transferred to the partners of Spravia whose cookies are set in the Website (‘Partners’) if the User consents to it.
2.4 Types of cookies depending on their storage period:
2.4.1 Session cookies – stored in the User’s device until the end of the browser session. Stored information is then permanently deleted from the device memory;
2.4.2 Persistent cookies – stored in the User’s device for the period specified in the cookie parameters or until they are removed by the User. Closing the session of a browser or turning the device off does not result in their deletion from the User’s device. The persistent cookie mechanism does not allow the collection of any personal data or any confidential information from the User’s device.
2.5 Types of cookies depending on their origin:
2.5.1 First-party cookies – set by the web servers of the Website;
2.5.2 Third-party cookies – set by the web servers of websites other than the Website.
2.6 Cookies are used in the Websites on the basis of the User’s consent expressed by selecting the appropriate option during the first visit to the Website, adapting the choices regarding cookies using the Cookie Settings panel or proper configuration of settings in the User’s browser. Granting consent for the use of cookies in the Websites is voluntary.
2.7 Before granting consent for the use of cookies, the User is informed about the purposes of using cookies in the Websites and about the possibility of changing cookie settings at any time.
2.8 The User may withdraw their consent for the use of cookies and change cookie settings at any time in the Cookie Settings panel, as well as remove cookies from the User’s device.
2.9 Furthermore, the User may at any time change cookie settings in the web browser settings. Detailed information on how to change cookie settings in the most popular Internet browsers can be found at:
2.9.1 Google Chrome https://support.google.com/chrome/answer/95647?hl=en;
2.9.2 Firefox https://support.mozilla.org/en-US/kb/cookies-information-websites-store-on-your-computer;
2.9.3 Internet Explorer https://support.microsoft.com/en-us/windows/delete-and-manage-cookies-168dab11-0753-043d-7c16-ede5947fc64d;
2.9.4 Opera https://help.opera.com/en/latest/web-preferences/#cookies;
2.9.5 Safari https://support.apple.com/en-gb/guide/safari/sfri11471/mac.
2.10 Information, including personal data, obtained in connection with the use of cookies in the Websites, is processed by Spravia and may be also processed by its Partners, provided that the User consented to the use of third-party cookies.
3.1 The controller of your personal data is Spravia sp. z o.o. with its registered office in Warsaw, ul. Skierniewicka 16/20, 01-230 Warsaw. Contact details of Spravia: warszawa@spravia.pl, phone: +48-22-623-65-55.
3.2 Spravia appointed the Data Protection Inspector who can be contacted at iod@spravia.pl.
3.3 Spravia processes Users’ personal data in accordance with Regulation (EU) 2016/679 of 27 April 2016 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter the ‘GDPR’:
3.3.1 in connection with the forms used in the Websites – for marketing purposes related to the products and services of Spravia on the basis of the User’s consent to the processing of personal data stated in the form available in the Website (Art. 6 sec. 1 letter a) of the GDPR);
3.3.2 in connection with the use of cookies in the Websites – in the scope necessary for purposes arising from legitimate interests pursued by Spravia or a third party, in the form of ensuring the proper operation of the Websites, saving the settings chosen by the User and any choices made in the Websites, improving the performance of the Websites, collecting information on the way Users use the Websites, improving the Websites, adapting the operation of the Websites to the Users’ preferences, creating statistics on the use of the Websites and for marketing purposes (Art. 6 sec. 1 letter f) of the GDPR);
3.3.3 in connection with profiling – in the scope necessary for purposes arising from legitimate interests pursued by Spravia or a third party in the form of provision of personalised advertisements or assessing what services the User may be interested in (art. 6 sec. 1 letter f) of the GDPR). Profiling, however, does not lead to decisions based only on automated processing, including profiling, and does not cause any legal effects for the User or significantly affects the User;
3.3.4 in connection with the collection of server logs – in the scope necessary for the purposes arising from legitimate interests pursued by Spravia or a third party, in the form of administering the Website and ensuring the most efficient provision of services;
3.3.5 in the scope necessary for the purposes of establishing, pursuing and defending claims arising from legitimate interests pursued by Spravia or by a third party (Art. 6 sec. 1 letter f) of the GDPR).
3.4 The recipients of personal data may be – only when it is necessary and in the required scope – entities cooperating with Spravia in the scope of services rendered for Spravia and supporting ongoing business processes of Spravia, in particular entities providing IT services, providers of marketing services, intermediaries, banks, partners.
3.5 Personal data may be transferred to a third country, whereby the transfer of personal data to a third country will take place while maintaining an appropriate level of protection, pursuant to Art. 46 section 2 point c) of the GDPR. The User may contact Spravia to learn about the possibilities of obtaining a copy of the data or the place of provision of data.
3.6 If data is processed on the basis of voluntary consent, personal data may be stored until the consent for data processing is revoked for specific, express and legally justified purposes. Consent to data processing may be revoked at any time. Such consent may be revoked by contacting the Data Protection Officer at iod@spravia.pl. Withdrawal of consent has no effect on the lawfulness of processing based on consent before its withdrawal.
3.7 If the processing is necessary for purposes arising from legitimate interests pursued by Spravia or a third party, personal data will be processed for a period not longer than is necessary for the purposes for which the data is processed, or until an objection to the processing of personal data for these purposes is lodged, and personal data obtained in connection with the use of cookies in the Websites will be processed during the period specified in the cookie parameters or until their removal from the User’s device.
3.8 If personal data is processed for the purposes of direct marketing, personal data will be processed until an objection to the processing for the purposes of such marketing is lodged, including profiling, to the extent to which such processing is related to such direct marketing.
3.9 The User has the right to access their personal data, to rectify, delete the data, to limit and to object to the processing of the data, as well as the right to lodge a complaint to the President of the Personal Data Protection Office.
3.10 The provision of personal data is voluntary.
